IR Officer processing — Intranet Portal
Verified submissions arrive here only across the controlled transfer boundary — pulled from the public Internet Portal, schema- and signature-checked, then ingested into this zone’s own case store. Reporting forms and public identities do not exist in this portal.
One-way boundary
The Intranet always initiates the pull; the Internet tier can never reach inward (WSH SDS §6.3).
Own datastore
Officers read an ingested snapshot — never the public database. The two zones never share a connection.
Human holds decisions
Accept/reject, classification and merges are human-only; agents are advisory by construction (DR-AG).